Network Security

I'm trying to map 802.1p CoS to DSCP when policing the ingress of an L2TPv3 tunnel endpoint interface.2 commands exist in documentation.set-dscp-transmit or .However using 12.3(8)T4 on a 7206 doesn't give me the set-dscp-tunnel-transmit so i can't ap...

Hi All,I going to install 3 IDSs on my corporate network, can I configure these IDSs to alert administrator only when more than 2 of the IDSs dectect the same signature? If this can be done, how do I configure, any extra monitoring tool needed?regard...

Hi We are using Solaris box for EDI server, and on other edi end point is the Checkpoint NG box. Checkpoint doesn't have Solaris vpn client (only have windows version). Could use Cisco Soloaris client (we are using cisco vpn) to the Checkpoint box, ...

Hi guys,Two PIX 525 in failover topology. on every pix, the first iface is used for vlan logical interfaces (different security levels, etc) and the second ethernet is for failover/state link. everything works fine, and the problem is not related to ...

Greetings,I have figured out a way to have a Cisco IDS appliance running v4.1 of the software update its time via NTP without relying on a server that offers “authenticated time.”This is accomplished using the following method:1) Create, if necessary...

I have managed to get a pix firewall to communicate with an snmp monitor on the far side of a vpn tunnel. I would like to use snmp to monitor the state of the vpn tunnels on my pixes (even something as simple as "current state = QM_IDLE", for exampl...

Does anyone know if a Microsoft ISA server can be used in conjunction with a Pix firewall? I know the PIX works with N2H2 and websense for filtering, but can it work with ISA? The workstations have a "client" loaded on them, and if the ISA server bec...

Hi,I have a customer which has 6 cat6500 in the core and is looking for an ids solution.Beside the idsm-2 he wants to evaluate snort. As i have no experience on that product i'm advised on your help/input:-Pros/cons-where to deploy ids sensors-is sno...

hello, my client has a pix 501 firewall/router. I need the commands so i can see the current config of the device. i searched the site and found a link but just reading it gave me a headace. i really dont do much cisco so any help would be appreciat...

I have a PIX 515 UR that will no longer boot up (hardware details below - running software v5.1.2)On a normal boot, when attempting load it gives "Panic: kernel - The checksum verficiation for this image failed", then reboots.The PIX will boot into m...

Dear All,I have to submit VMS documentation ( wht it is , wht it can do , wht im doing with it, how it helps to the organisation ) to my customer. im already using it. pls , can any body provide some links r guidelines to prepare this ( 20 to 30 pag...

Cisco PIX document states that - If the two units are more than six feet apart, you can use the same Ethernet state link as the failover link, but we recommend that you use a separate Ethernet link if available. http://www.cisco.com/univercd/cc/td/do...

Hi,It is recommended on following URL that crossover cable should not be used for PIX LAN based failovers. Does anybody know what is the rationale behind this recommendation and why a switched connection is recommended between Pri and Stby PIX firewa...

Can I create a VPN tunnel where the remote router is behind a gateway router that uses Port Address Translation? In other words, one public IP for the entire private network? We're using a Concentrator 3005 at our corporate location and an 831 at t...

At my new job, I am no longer in the role of supporting our Firewall/VPN (all done at Corporate). I've recently been told that they are replacing all of our PIX firewalls with 1721 Routers to handle our Firewall/VPN connections. My previous experie...